|  | 3.2 | Segmentation with Switching Architectures
| 3.2.2 |
Differences between traditional switched LAN and VLANs
In a LAN that utilizes LAN switching devices, VLAN technology is a cost-effective and efficient way of grouping network users into virtual workgroups regardless of their physical location on the network. The graphic shows the difference between LAN and VLAN segmentation. Some of the main differences are as follows: VLANs work at Layer 2 and Layer 3 of the OSI reference model. Communication between VLANs is provided by Layer 3 routing. VLANs provide a method of controlling network broadcasts. The network administrator assigns users to a VLAN. VLANs can increase network security by defining which network nodes can communicate with each other. Using VLAN technology, you can group switch ports and their connected users into logically defined workgroups, such as the following: Coworkers in the same department A cross-functional product team Diverse user groups sharing the same network application or software You can group these ports and users into workgroups on a single switch or on connected switches. By grouping ports and users together across multiple switches, VLANs can span single-building infrastructures, interconnected buildings, or even wide-area networks (WANs).
| Web Links
| Guide to VLANs